Static task
static1
Behavioral task
behavioral1
Sample
656cbe89e8de44a171f8e0928dd54c82_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
656cbe89e8de44a171f8e0928dd54c82_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
656cbe89e8de44a171f8e0928dd54c82_JaffaCakes118
-
Size
791KB
-
MD5
656cbe89e8de44a171f8e0928dd54c82
-
SHA1
e53a2c04acc169c30b9ab79555f2cd045dca36af
-
SHA256
334573b5d45dae9447050cc038264568ae3309ee64904d11ebeffeba2027cc53
-
SHA512
12c6c99200e9703d4e2e37f80c989dc6845ce47a36a7cedf28e055a6e83d4ab6178b4fd7e08dbc37f1011adf4c9a8af57e0f61bd430c86ef7248ccbc30dffea7
-
SSDEEP
12288:J/LNKAn3qGaNHEyC9/oR9gy5FHK7zpPZj4RnF6t6u3zk/8uLJKrjuiBswO18q/or:JxKAPp9AR95ylPZystHuUFwo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 656cbe89e8de44a171f8e0928dd54c82_JaffaCakes118
Files
-
656cbe89e8de44a171f8e0928dd54c82_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 785KB - Virtual size: 785KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ